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DYNAMIC REASSIGNMENT OF POSTAL METERING 
DEVICE LICENSING LOCATION 

BACKGROUND OF THE INVENTION 

This application claims priority under 35 U.S.C. §119 (e) 
from provisional patent application Serial No. 60/195, 683 
filed on April 7, 2000, which is incorporated herein by 
5 reference. 

1 . Field of the Invention 

The present invention relates to postal metering devices. 
More particularly it relates to the reassignment of the 
location of postal metering devices, and the apparatus 
10 therein used to securely store funds. 

2 . Background Art 

Throughout the history of postage metering, at least in 
the United States, it has been a requirement of the 
Postal Service to assure the postage funds spent from a 
15 postage meter were allocated to the post office where the 
meter is registered. 

In accordance with United States Postal Service (USPS) 
regulations, a postage meter licensee must obtain a meter 
license from the post office where the mailing is to be 

20 deposited. If a licensee changes the post office where 
metered mail is to be deposited, the meter must be 
checked out of service by the licensing post office. 
That meter or another meter must, be licensed at the new 
post office before it is reset or initial settings are 

25 made. This is a marked disadvantage in terms of the lack 
of flexibility and inconvenience to -the user. 
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The purpose of the above, historic, method of meter 
licensing is to assure that the proper local post office 
is credited with the postage dispensed by its licensed 
meters. With the advent of smaller and smaller postage 
metering device and in fact transportable postage funds 
vaults, these present day licensing techniques and their 
inherent disadvantages are no longer necessary. 



SUMMARY OF THE INVENTION 

It is an object of this invention to provide a postage 
10 funds vault (also referred to as a Postal Security Device 
(PSD) , herein) able to be moved from location-to-location 
and used to dispense postage in all locations, while the 
proof of postage expenditures are allocated . to the local 
post office where the mailpiece will be deposited. 

15 It is another object of this invention to change the post 
office licensing /location used by. the PSD to accommodate 
the use of said PSD at locations other than the initial 
licensing post office. 

It is still another object of this invention to provide 
20 the ability to dynamically identify the location of the 
PSD at the time of use to an appropriate infrastructure 
such that the related local post office locations may be 
programmed into the PSD. The infrastructure of choice 
may be the existing infrastructure referred to as 
25 Telemetering Setting (TMS) generally in service today 
(also referred to as Computerized Remote Postage meter 
Resetting System (CMRS) ) . Other infrastructure 

implementations are envisioned, including that of the 
^USPS. These CMRS entities allow remote funds loading 
30 into the PSD. 
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It is yet another object of this invention to adapt a PSD 
to a printing system such that the PSD-printer 
combination may be moved from location to location . This 
is typical of a small postal metering device of this 
5 type. 

In accordance with the invention, the TMS, at all times 
knows the physical location of any PSD that is dispensing 
postage. The TMS will immediately notify the local USPS 
infrastructure that the license holder of any specific 

10 PSD is using said PSD in a location outside that to which 
it was originally licensed. For example, the PSD may 
have been licensed to the home address of the customer, 
and the customer may then use the PSD at some other 
location outside the servicing area of the local post 

15 office that assigned the license. Preferably, the TMS 
notifies a centralized USPS infrastructure as to its 
whereabouts, and the centralized postal infrastructure 
associates the PSD location to the appropriate local post 
office . 

20 The USPS infrastructure then issues a modified meter 
license reflecting the location of the PSD to the TMS 
center. The associated TMS database acknowledges to the 
associated PSD that its postal zip code is changed, or 
that, in addition, its city/state location is changed. 

25 The PSD then receives a download with the related zip 
code and/or city/state designation. Then the PSD 

produces proof of postage indicium with the correct local 
postal drop off location. 

Thus, the invention is directed to a method for operating 
30 a device for the secure storage of funds comprising 
interfacing the device with a system; transmitting from 
the device to the system a present location of the 
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device; comparing in a database associated with the 
system the present location of the device with a 
previously stored location; and transmitting to the 
device from the system an authorization to utilize the 
5 funds only if the present location is within a 
predetermined region associated with the previously 
stored location. The authorization is transmitted only 
if the present location matches the previously stored 
location. Generally, the device is licensed for use at 
10 the previously stored location, and if the comparing 
indicates that the device is not in the predetermined 
region, the system issues a new license for a region 
associated with the present location of the device. 



15 



The method may further comprise communicating from the 
system to the device, data associated with the present 
location. 



The device may be a postal security device and the data 
may include at least one of zip code, city and state 
information. The method may further comprise powering up 
20 the device, the method being conducted when the device is 
powered up. Generally the transmitting is done when the 
device establishes a contact with the system. The 
contact with the system may be terminated after the 
location of the device is determined. 

25 if the contact is made by telephone, the location of the 
device is determined by using caller identification. If 
the contact is made using a network, the location of the 
device is determined by obtaining a network address of 
the device. If the contact is made using the internet, 

30 the location of the^.. device is determined by using 
internet service provider location identification. If the 
contact is made using a cellular telephone port, the 
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location of the device is determined using a location 
identifier of a cellular telephone system with which the 
cellular telephone communicates. The device may., be 
associated with a position determining apparatus for 
5 determining its location, the device providing to the 
system its location as determined by the position 
determining apparatus. The position locating apparatus 
may be a global positioning system receiver. 

Also in accordance with the invention, there is provided 
10 a device for the secure storage of funds comprising a 
memory for storing value of the funds; apparatus 
associated with the device for determining a location of 
the device; and a communication port for providing 
communication between the device and a system, the device 
15 communicating the location to the system via the port. 

The device may further comprise apparatus for receiving 
from the system an authorization to access the funds, if 
the location is within a predetermined region, 'or 
alternatively, if the location corresponds to a 
20 predetermined location. 

The invention is also directed to an arrangement for 
securely dispensing funds comprising a device for the 
secure storage of funds, including a memory for storing 
value of the funds, apparatus associated with the -device 

25 for determining a location of the device; a communication 
port for providing communication between the device and a 
system, the device communicating the location to said 
system via said port; the system having a database for 
storing, for each device, a predetermined location; and 

30 apparatus in the system for providing an authorization to 
the device to dispense funds only if the present location 
is within a region associated with the predetermined 
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location, or if the present location is the predetermined 
location. Preferably, cryptographic key management 

supports secure communication with the device. The 
device may include apparatus for inhibiting operation of 
5 the device or the host, if the device does not receive a 
predetermined digital coded sequence from the host or the 
host does not receive a predetermined digital coded 
sequence from said device. 

BRIEF DESCRIPTION OF THE DRAWINGS 

10 The foregoing aspects and other features of the present 
invention are explained in the following description, 
taken in connection with the 'accompanying drawings, 
wherein: 

Fig. 1 is a conceptual representation of a PSD in 
15 accordance with the invention. 

Fig. 2 is a system diagram illustrating the manner in 
which different types of PSD' s in accordance with the 
invention may be interfaced in the system. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 

20 Referring to Fig 1, a secure source of funds such as a 
PSD 10 is configured with a well known vault structure 12 
which generally includes an ascending register, a 
descending register and suitable encryption technology to 
allow it to receive funds from a central telemetering 

25 system and to dispense those funds for use in, for 
example, a standard postal metering system. Vault 12 is 
also associated with a communications port 14 to allow 
the downloading of funds from the telemetering system and 
the withdrawal of funds by the postal metering system. 
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The PSD 10 according to the invention is also associated 
with a location generator 16 which derives information 
concerning the location of the PSD. This can be 

accomplished in a variety of ways as more fully described 
5 below with respect to Fig. 2. However, what is important 
is that when PSD 10 makes contact with the central TMS 
system, it transmits, by way of the communications port 
14, the location information generated by location 
generator 16, to the central system. Preferably, this is 
10 done whenever the PSD 10 is powered up. While it could 
be done more frequently, or even on a continuous basis, 
this would be a wasteful use of communication resources. 

After receiving the location, the central system either 
permits PSD 10 to dispense postage if it is at its 

15 licensed location (or in a region associated with the 
licensed location, such as within the same zip code area) 
or, as more fully described below, inhibits the 
dispensing of postage until a new license is issued for 
the new location. Once the central TMS system lias 

20 received the new location of the PSD 10 it is no longer 
necessary, to maintain a connection with it. The 
connection may be broken until the next time PSD 10 is 
powered up. It will be recognized by one skilled in the 
art that this required communication with the 

25 telemetering system may be used as an opportunity to 
download funds, transmit logs, or deal with other 
administrative chores generally associated with 
communication between the PSD 10 and the central system. 
As is well known in the art such communication is 

30 generally conducted using appropriate encryption 
technology such as for example, public key, private key 
digital encryption to enhance security and may be 
digitally signed with an appropriate digital certificate. 



I 
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Referring to Fig. 2, a system 20 in accordance with the 
invention is illustrated. A corporate/communication 
infrastructure (such as one operated by a particular 
corporation) or more simply a communications 
5 infrastructure 22, including appropriate TMS and account 
management systems, is connected through a communication 
link with the postal authority infrastructure, such as in 
the United States, the United States Postal Service 
infrastructure 24, by a secure communications link 26. 

10 Communications infrastructure 22 is in turn connected to 
numerous PSD' s 10A, 10B. In accordance with the invention 
are various means for the PSD' s to communicate with 
communications infrastructure 22. These include dial-in 
modems 28A, 28B, and internet connections 30A, 30B using 

15 secure sockets with the TC/IP internet protocol. 
Alternatively, a PSD may communicate with communications 
infrastructure 22 using a cell phone port 32. 

Each PSD 10A, 10B according to the invention is generally 
associated with a host processor 34A or 34B. In the case 
of a postal metering system for a home or small business, 
host processor 34A may be in a, small portable postal 
metering system. Alternatively, host processor 34A may 
be a personal computer. • In any event, a connection 
between host processor 34A and communications 
infrastructure 22 is established by either dial -in "modem. 
28A or using the internet as illustrated at 30A. Upon 
powering up of the PSD, PSD location data is transmitted 
from either PSD 10 via host processor 34A or from 
processor 34A to communications infrastructure 22. The 
most secure arrangement is to have the PSD generate the 
location -information. Thus, any change in the ^location 
of the PSD will be detected. However, it is also 
possible to have the host processor generate ^location 
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information, or to be associated with apparatus that 
performs this function. In this case, it is preferred 
that the PSD and its host are configured so that they can 
only operate if associated with one another. For 
5 example, the PSD may be configured so that it will 
operate only if it receives a predetermined digitally 
coded data sequence from the host processor with which it 
is intended to operate. In addition, or in the 

alternative, the host processor may be configured so that 
10 it will not withdraw funds from a PSD unless the PSD 
provides to it a different, predetermined digitally coded 
data sequence. The general approach here is to enhance 
security when the PSD may be removed from the postage 
metering device. 

15 In the case of a dial-in modem, a determination of the 
location of the PSD may be accomplished by using ordinary 
caller identification, if an ordinary public service 
switched network telephone line is used. However, in 
this case the option of suppressing caller identification 

20 may not be used when the call to communications 
infrastructure 22 is made. 

If the PSD location data transmitted from host processor 
34A matches that stored in the database associated with 
the account management system of communications 

25 infrastructure 22, then communications infrastructure 22 
transmits an authorization to the host processor to allow 
PSD 10A to dispense postage. As noted above, an 

opportunity now exists for ordinary exchanges between the 
PSD 10A and communications infrastructure 22 to take 

30 place such as downloading funds or uploading logs. After 
any such house keeping functions occur, which are not 
required in accordance with the invention, the connection 
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between host processor 34A and communications 
infrastructure 22 may be broken. 

If the PSD location data transmitted to communications 
infrastructure 22 does not match that stored in the 
5 account management system of communications 

infrastructure 22, the USPS infrastructure 24 is informed 
of this change via communications link 26. The USPS 
infrastructure then issues a modified meter license 
reflecting the location of the PSD 10A to the 

10 communications infrastructure 22. The account management 
system database is updated and the host processor 34A 
receives information indicating that the postal zip code 
and if appropriate to the new location, the city/state 
location has been changed. When this information has 

15 been downloaded to the host processor, the PSD can then 
produce proof of postage indicium with the correct local 
postal drop off location data contained therein. 

In the case of larger postal metering systems, the PSD 
10B may be associated with a host processor 34B in- a 

20 rather large mailing system 35. . Again, connections may 
be made using a dial-in modem 28B over a telephone line 
or via the internet 30B. In the case of an internet 
connection, the location of the host processor and 
therefore the PSD may be determined by using the internet 

25 service providers' user location information. The IP 
address of the host processor can pinpoint the location 
of the PSD. Again, the PSD location is uploaded to 
communications infrastructure 22 and if necessary, 
because the location has changed, zip code and city and 

30 state update information is downloaded to host processor 
34B. 
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Another alternative way of obtaining location information 
is to have associated with the postal metering system a 
global positioning system receiver 36 connected through a 
communications link 38 to the PSD. Thus, accurate global 
5 positioning system information may be provided through 
the host processor 34B to communications infrastructure 
22 to quickly and accurately identify the location of 
PSD 10B. 

As yet another alternative, a cell phone port 32 may be 
10 associated with PSD 10B of the associated postal metering 
system. The cell phone may make contact, through an 
appropriate base station 40 and a telephone line 42, with 
communications infrastructure 22. The cell phone system 
would thus provide, via its location identifier, ; ; the 
15 location of the PSD. 

While the present invention has particular applicability 
to the printing of postal indicia due to the postal 
regulations, it will be understood that it may be applied 
to a variety of applications. For example, items other 

20 than postal indicia may be printed. In this case, where 
there may be no specific regulations on point, the 
invention will provide an additional layer of security so 
that if the secure source of funds and its associated 
system are stolen and moved to a new location (besides 

25 the usual security measures such as call back 
requirements, where the communications infrastructure 22 
returns a phone call to the host processor associated 
with the PSD) it will instantly become evident that the 
PSD has been moved. 

30 It should be understood that the foregoing description is 
only illustrative of the invention. Various alternatives 
and modifications can be devised by those skilled in the 
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art without departing from the invention. Accordingly, 
the present invention is intended to embrace all such 
alternatives, modifications and variances which fall 
within the scope of the appended claims. 
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CLAIMS 

What is claimed is: 

1 . A method for operating a device for the secure 
storage of funds comprising: 

interfacing said device with a system; 

transmitting from said device to the system a 
present location of said device; 

comparing in a database associated with said system 
the present location of said device with a 
previously stored location; and 

transmitting to said device from said system an 
authorization to utilize said funds only if the 
present location is within a predetermined region 
associated with said previously stored location. 

2. The method of claim 1, wherein " said 
authorization is transmitted only if the present location 
matches the previously stored location. 

3. The method of claim 1, wherein said device is 
licensed for use at said previously stored location, and 
if the comparing indicates that the device is not in the 
predetermined region, the system issues a new license for. 
a region associated with the present location of said 
device . 

4. The method of claim 3, further comprising 
communicating from the system to the device, data 
associated with the present location. 
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5. The method of claim 4 wherein said, device is a 
postal security device and said data includes at least 
one of zip code, city and state information. 

6. The method of claim 1, further comprising 
powering up said device, the method being conducted when 
said device is powered up. 

7. The method of claim 1, wherein said transmitting 
is done when said device establishes a contact with said 
system. 

8. The method of claim 7, wherein said contact with 
said system is terminated after the location of said 
device is determined. 

9. The method of claim 7 wherein if said contact is 
made by telephone, the location of said device is 
determined by using caller identification. 

10. The method of claim 7 wherein if said contact 
is made using a network, the location of said device is 
determined by obtaining a network address of said device. 

11. The method of claim 7 wherein if said contact 
is made using the internet, the location of said device 
is determined by using internet service provider location 
identification. 

12. The method of claim 7 wherein if said contact 
is made using a cellular telephone port, the location of 
said device is determined using a location identifier of 
a cellular telephone system with which said cellular 
telephone communicates. 

13. The method of claim 7 wherein said device is 
associated with a position determining apparatus for 
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determining its location, said device providing to said 
system its location as determined by said position 
determining apparatus . 

14. The method of claim 13 wherein said position 
locating apparatus is a global positioning system 
receiver . 

15 The method of claim 1 wherein said device is a 
postal security device. 

16. A device for the secure storage of funds 
comprising: 

a memory for storing value of said funds; 

apparatus associated with said device for 
determining a location of said device; and 

a communication port for providing communication 
between said device and a system, said device 
communicating said location to said system via said 
port . 

17. The device of claim 16 further comprising 
apparatus for receiving from said system an authorization 
to access said funds, if said location is within a 
predetermined region. 

18. The device of claim 17 wherein said apparatus 
provides access to said funds if said location 
corresponds to a predetermined location. 

19. The device of claim 16, further comprising 
apparatus for encrypting and digitally signing, or 
digitally signing said communication. 



WO 01/078018 



16 



PCT/US01/11508 



20. An arrangement for securely dispensing funds 
comprising: 

. a device for the secure storage of funds, including: 

a memory for storing value of said funds, 

apparatus associated with said device for 
determining a location of said device; 

a communication port for providing 

communication between said device and a system, 
said device communicating said location to said 
system via said port; 

the system having a database for storing, for. each 
device, a predetermined location;, and 

apparatus in said system for providing- an 
authorization to said device to dispense funds only 
if said present location is within a region 
associated with said predetermined . location . 

21. The arrangement of claim 20 wherein said 
apparatus provides said authorization only if said 
present location matches said previously stored location. 

22. The arrangement of claim 19 wherein 
cryptographic key management supports secure 
communication with the device. 

23. A device for the secure storage of funds 
comprising; 

a memory for storing value of said funds; 

a communication port for providing communication 
with a with a host y for said device; 
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apparatus for preventing operation of said device or 
said host if said device does not receive a 
predetermined digital coded sequence from said host 
or said host does not receive a predetermined 
digital coded sequence from said device. 
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DYNAMIC REASSIGNMENT OF POSTAL METERING 
DEVICE LICENSING LOCATION 

BACKGROUND OF THE INVENTION 

This application claims priority under 35 U.S.C. §119 (e) 
from provisional patent application Serial No. 60/195,683 
filed on April 7, 2000, which is incorporated herein by 
reference . 

1- Field of the Invention 

The present invention relates to postal metering devices. 
More particularly it relates to the reassignment of the 
location of postal metering devices, and the apparatus 
therein used to securely store funds. 

2 . Background Art 

Throughout the history of postage metering, at least in 
the United States, it has been a requirement of the 
Postal Service to assure the postage funds spent from a 
postage meter were allocated to the post office where the 
meter is registered. 

In accordance with United States Postal Service (USPS) 
regulations, a postage meter licensee must obtain a meter 
license from the post office where the mailing is to be 
deposited. If a licensee changes the post office where * 
metered mail is to be deposited, the meter must be 
checked out of service by the licensing post office. 
That meter or another meter must be licensed at the new 
post office before it is reset or initial settings are 
made. This is a marked disadvantage in terms of the lack 
of flexibility and inconvenience to the user. 
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The purpose of the above, historic, method of meter 
licensing is to assure that the proper local post office 
is credited with the postage dispensed by its licensed 
meters. With the advent of smaller . and smaller postage 
5 metering device and in fact transportable postage funds 
vaults, these present day licensing techniques and their 
inherent disadvantages are no longer necessary. 

SUMMARY OF THE INVENTION 

It is an object of this invention to provide a postage 
10 funds vault (also referred to as a Postal Security Device 
(PSD) , herein) able to be moved from location-to-location 
and used to dispense postage in all locations, while the 
proof of postage expenditures are allocated to the local 
post office where the mailpiece will be deposited. 

15 It is another object of this invention to change the post 
office licensing location used by the PSD to accommodate 
the use of said PSD at locations other than the initial 
licensing post office. 

It is still another object of this invention to provide 
20 the ability to dynamically identify the location of the 
PSD at the time of use to an appropriate infrastructure 
such that the related local post office locations may be 
programmed into the PSD. The infrastructure of choice 
may be the existing infrastructure referred to as 
25 Telemetering Setting (TMS) generally in service today 
(also referred to as Computerized Remote Postage meter 
Resetting System (CMRS)) . Other infrastructure 

implementations are envisioned, including that of the 
USPS. These CMRS entities allow remote funds loading 
30 into the PSD. 
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It is yet another object of this invention to adapt a PSD 
to a printing system such that the PSD-printer 
combination may be moved from location to location. This 
is typical of a small postal metering device of this 
type. 

In accordance with the invention, the TMS, at all times 
knows the physical location of any PSD that is dispensing 
postage. The TMS will immediately notify the local USPS 
infrastructure that the license holder of any specific 
PSD is using said PSD in a location outside that to which 
it was originally licensed. For example, the PSD may 
have been licensed to the home address of the customer, 
and the customer may then use the PSD at some other 
location outside the servicing area of the local post 
office that assigned the license. Preferably, the TMS 
notifies a centralized USPS infrastructure as to its 
whereabouts, and the centralized postal infrastructure 
associates the PSD location to the appropriate local post 
office . 

The USPS infrastructure then issues a modified meter 
license reflecting the location of the PSD to the TMS 
center. The associated TMS database acknowledges to the 
associated PSD that its postal zip code is changed, or 
that, in addition, its city/state location is changed. 
The PSD then receives a download with the related zip 
code and/or city/state designation. Then the' PSD 

produces proof of postage indicium with the correct local 
postal drop off location. 

Thus, the invention is directed to a method for operating 
a device for the secure storage of funds comprising 
interfacing the device with a system; transmitting from 
the device to the system a present location of the 
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15 



20 



25 



30 



device; comparing in a database associated with the 
system the present location of the device with a 
previously stored location; and transmitting to the 
device from the system an authorization to utilize the 
funds only if the present location is within a 
predetermined region associated with the previously 
stored location. The authorization is transmitted only 
if the present location matches the previously stored 
location. Generally, the device is licensed for use at 
the previously stored location,, and if the comparing 
indicates that the device is not in the predetermined 
region, the system issues a new license for a region 
associated with the present location of the device. 

The method may further comprise communicating from the 
system to the device, data associated with the present 
location. 

The device may be a postal security device and the data 
m ay include at least one of zip code, city and state 
information. The method may further comprise powering up 
the device, the method being conducted when the device is 
powered up. Generally the transmitting is done when the 
device establishes a contact with the system. The 
contact with the system may be terminated after the 
location of the device is determined. 

If the contact is made by telephone, the location of the 
device is determined by using caller identification. If 
the contact is made using a network, the location of the 
device is determined by obtaining a network address of 
the device. If the contact is made using the internet, 
the location of the device is determined by using 
internet service provider location identification. If the 
contact is made using a cellular telephone port, the 
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location of the device is detained using a location 
identifier of a cellular- t- i *. CaCion 
cellular , , I 6llUl3r tele P*°*e system with which the 
cellular telephone communicates. The device raav h 
associated with a nne4f . 6 may be 

5 d.t- • • P ° Sltl0n determining apparatus for 

t^ 1 ^ itS lo «*±on, the device providing to the 
tern lts location as determ±ned o t 

e 7 nin9 aPParatUS - ^ P ° Siti0n ^ting apparatuT 
-ay be a global positioning system receiver. 

- T°*z ;; c :::z: with the invention ' — - ~ 

-ory for storinr 0 ^ °' ^ * 

storxng value of the funds; apparatus 

associated with the device for ri*t- • • a PP^atus 
the device- and a ^termxnxng a location of 

' and a communication port for r™ ■ 
—ion tetween tne device and a ? system 

commenting tne iocation to the system via the ^ 

The dev.ce may further conpris9 apparatus ^ • 

I" hS : ySteM " aUt — to access the funds Z 
the xocatxon ia within a predetermln9d ' ^ 

alternatively, if +- h<a , y ' or 

on - location corresponds to * 

20 predetermined location. a 

The invention i s also directed fn *n 

alue of the funds, apparatus associated with the devicl 
25 for determining a location of the device-', device - 
nn,)- * aevice; a communication 

port for providing communication between the device and a 
astern, the device communicating the location to said 
= via said port.- the system having . da ta b ase for 
storrng, for each device, a predetermined location- „„ rf 
30 apparatus in the system for providing an authorl ation to 
he devrce to dispense funds ™iy if the present 
- withrn a region associated with the predetermined 
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location, or if the present location is the predetermined 
location. Preferably, cryptographic key management 

supports secure communication with the device. The 
device may include apparatus for inhibiting operation of 
5 the device or the host, if the device does not receive a 
predetermined digital coded sequence from the host or the 
host does not receive a predetermined digital coded 
sequence from said device. 

BRIEF DESCRIPTION OF THE DRAWINGS 

10 The foregoing aspects and other features of the present 
invention are explained in the following description, 
taken in connection with the 'accompanying drawings, 
wherein : 

Fig. 1 is a conceptual representation of a PSD in 
15 accordance with the invention. 

Fig. 2 is a system diagram illustrating the manner in 
which different types of PSD' s in accordance with the 
invention may be interfaced in the system. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 

20 Referring to Fig 1, a secure source of funds such as a 

PSD 10 is configured with a well known vault structure 12 * 
which generally includes an ascending register, a 
descending register and suitable encryption technology to 
allow it to receive funds from a central telemetering 

25 system and to dispense those funds for use in, for 
example, a standard postal metering system. Vault 12 is 
also associated with .a communications port 14 to allow 
the downloading of funds from the telemetering system and 
the withdrawal of funds by the postal metering system. 
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The PSD 10 according to the invention is also associated 
with a location generator 16 which derives information 
concerning the location of the PSD. This can be 

accomplished in a variety of ways as more fully described 
below with respect to Fig. 2. However, what is important 
is that when PSD 10 makes contact with the central TMS 
system, it transmits, by way of the communications port 
14, the location information generated by location 
generator 16, to the central system. Preferably, this is 
done whenever the PSD 10 is powered up. While it could 
be done more frequently, or even on a continuous basis, 
this would be a wasteful use of communication resources. 

After receiving the location, the central system either 
permits PSD 10 to dispense postage if it is at its 
licensed location (or in a region associated with the 
licensed location, such as within the same zip code area) 
or, as more fully described below, inhibits the 
dispensing of postage until a new license is issued for 
the new location. Once the central TMS system has 
received the new location of the PSD 10 it is no longer 
necessary to maintain a connection with it. The 
connection may be broken until the next time PSD 10 is 
powered up. It will be recognized by one skilled in the 
art that this required communication with the 
telemetering system may be used as an opportunity to ■* 
download funds, transmit logs, or deal with other 
administrative chores generally associated with 
communication between the PSD 10 and the central system. 
As is well known in the art such communication is 
generally conducted using appropriate encryption 
technology such as for example, public key, private key 
digital encryption to enhance security and may be 
digitally signed with an appropriate digital certificate. 
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Referring to Fig. 2, a system 20 in accordance with the 
invention is illustrated. A corporate/communication 

infrastructure (such as one operated by a particular 
corporation) or more simply a communications 
5 infrastructure 22, including appropriate TMS and account 
management systems, is connected through a communication 
link with the postal authority infrastructure, such as in 
the United States, the United States Postal Service 
infrastructure 24, by a secure communications link 26, 

10 Communications infrastructure 22 is in turn connected to 
numerous PSD' s 10A, 10B. In accordance with the invention 
are various means for the PSD' s to communicate with 
communications infrastructure 22. These include dial-in 
modems 28A, • 28B, and internet connections 30A, 303 using 

15 secure sockets with the TC/IP internet protocol. 
Alternatively, a PSD may communicate with communications 
infrastructure 22 using a cell phone port 32. 

Each PSD 10A, 10B according to the invention is generally 
associated with a host processor 34A or 34B. In the case 

20 of a postal metering system for a home or small business, 
host processor 34A may be in a small portable postal 
metering system. Alternatively, host processor 34A may 
be a personal computer. ■ In any event, a connection 
between host processor 34A and communications 

25 infrastructure 22 is established by either dial-in modern^ 
28A or using the internet , as illustrated at 30A. Upon 
powering up of the PSD, PSD location data is transmitted 
from either PSD 10 via host processor 34A or from 
processor 34A to communications infrastructure 22. The 

30 most secure arrangement is to have the PSD generate the 
location information. Thus, any change in the location 
of the PSD will be detected. However, it is also 
possible to have the host processor generate location 
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information, or to be associated with apparatus that 
performs this function. in this case, it is preferred 
that the PSD and its host are configured so that they can 
only operate if associated with one another. For 
example, the PSD may be configured so that it will 
operate only if it receives a predetermined digitally 
coded data sequence from the host processor with which it 
is intended to operate. In addition, or in the 

alternative, the host processor may be configured so that 
it will not withdraw funds from a PSD unless the PSD 
provides to it a different, predetermined digitally coded 
data sequence. The general approach here is to enhance 
security when the PSD may be removed from the postage 
metering device. 

In the case of a dial-in modem, a determination of the 
location of the PSD may be accomplished by using ordinary 
caller identification, if an ordinary public service 
switched network telephone line is used. However, in 
this case the option of suppressing caller identification 
may not be used when the call to communications 
infrastructure 22 is made. 

If the PSD location data transmitted from host processor 
34A matches that stored in the database associated with 
the. account management system of communications 
infrastructure 22, then communications infrastructure 22 
transmits an authorization to the host processor to allow 
PSD 10A to dispense postage . As noted above, an 
opportunity now exists for ordinary exchanges between the 
PSD 10A and communications infrastructure 22 to take 
place such as downloading funds or uploading logs. After 
any such house keeping functions occur, which are not 
required in accordance with the invention, the connection 
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between host processor 34A and communications 
infrastructure 22 may be broken. 

If the PSD location data transmitted to communications 
infrastructure 22 .does not match that stored in the 
5 account management system of communications 

infrastructure 22, the USPS infrastructure 24 is informed 
of this change via communications link 26. The USPS 
infrastructure then issues a modified meter license 
reflecting the location of the PSD 10A to the 

10 communications infrastructure 22. The account management 
system database is updated and the host processor 34A 
receives information indicating that the postal zip code 
and if appropriate to the new location, the city/state 
location has been changed. When this information has 

15 been downloaded to the host processor, the PSD can then 
produce proof of postage indicium with the correct local 
postal drop off location data contained therein. 

In the case of larger postal metering systems, the PSD 
10B may be associated with a host processor 34B in. a 

20 rather large mailing system 35. Again, connections may 
be made using a dial-in modem 28B over a telephone line 
or via the internet 30B. In the case of an internet 
connection, the location of the host processor and 
therefore the PSD may be determined by using the internet 

25 service providers' user location information. The IP 
address of the host processor can pinpoint the location 
of the PSD. Again, the PSD location is uploaded to 
communications infrastructure 22 and if necessary, 
because the location has changed, zip code and city and 

30 state update information is downloaded to host processor 
343. 
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Another alternative way of obtaining location information 
is to have associated with the postal metering system a 
global positioning system receiver 36 connected through a 
communications link 38 to the PSD. Thus, accurate global 
5 positioning system information may be provided through 
the host processor 34B to communications infrastructure 
22 to quickly and accurately identify the location of 
PSD 10B. 

As yet another alternative, a cell phone port 32 may be 
10 associated with PSD 10B of the associated postal metering 
system. The cell phone may make contact, through an 
appropriate base station 40 and a telephone line 42, with 
communications infrastructure 22. The cell phone system 
would thus provide, via its location identifier, the 
15 location of the PSD. 

While the present invention has particular applicability 
to the printing of postal indicia due to the postal 
regulations, it will be understood that it may be applied 
to a variety of applications. For example, items other 

20 than postal indicia, may be printed. In this case, where 
there may be no specific regulations on point, the 
invention will provide an additional layer of security so 
that if the secure source of funds and its associated 
system are stolen and moved to a new location (besides 

25 the usual security measures such as call back 
requirements, where the communications infrastructure 22 
returns a phone call to the host processor associated 
with the PSD) it will instantly become evident that the 
PSD has been moved. 

30 It should be understood that the foregoing description is 
only illustrative of the invention. Various alternatives 
and modifications can be devised by those skilled in the 
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art without departing from the invention. Accordingly, 
the present invention is intended to embrace all such 
alternatives, modifications and variances which fall 
within the scope of the appended claims . 
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CLAIMS 

What is claimed is: 

1. A method for operating a device for the secure 
storage of funds comprising: 

interfacing said device with a system; 

transmitting from said device to the system a 
present location of said device/ 

comparing in a database associated with said system 
the present location of said device with a 
previously stored location; and 

transmitting to said device from said system an 
authorization to utilize said funds only if the 
present location is within a predetermined region 
associated with said previously stored location. 

2. The method of claim 1, wherein said 
authorization is transmitted only if the present location 
matches the previously stored location. 

3. The method of claim 1, wherein said device is 
licensed for use at said previously stored location, and 
if the comparing indicates that the device is not in the 
predetermined region, the system issues a new license for - 
a region associated with the present location of said 
device . 

4. The method of claim 3, further comprising 
communicating from the system to the device, data 
associated with the present location. 
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5. The method of claim 4 wherein said device is a 
postal security device and said data includes at least 
one of zip code, city and state information. 

6. The method of claim 1, further comprising 
powering up said device, the method being conducted when 
said device is powered up. 

7. The method of claim 1, wherein said transmitting 
is done when said device establishes a contact with said 
system. 

8. The method of claim 7, wherein said contact with 
said system is terminated after the location of said 
device is determined. 

9. The method of claim 7 wherein if said contact is 
made by telephone, the location of said device is 
determined by using caller identification. 

10. The method of claim 7 wherein if said contact 
is made using a network, the location of said device is 
determined by obtaining a network address of said device. 

11. The method of claim 7 wherein if said contact 
is made using the internet, the location of said device 
is determined by using internet service provider location 
identification. 

12. The method of claim 7 wherein if said contact 
is made using a cellular telephone port, the location of 
said device is determined using a location identifier of 
a cellular telephone system with which said cellular 
telephone communicates . 

13. The method of claim 7 wherein said device is 
associated with a position determining apparatus for 
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determining its location, said device providing to said 
system its location as determined by said position 
determining apparatus . 

14. The method of claim 13 wherein said position 
locating apparatus is a global positioning system 
receiver. 

15 The method of claim 1 wherein said device is a 
postal security device. 

16. A device for the secure storage of funds 
comprising: 

a memory for storing value of said funds; 

apparatus associated with said device for 
determining a location of said device; and 

a communication port for providing communication 
between said device and a system, said device 
communicating said location to said system via said 
port . 

17. The device of claim 16 further comprising 
apparatus for receiving from said system, an authorization 
to access said funds, if said location is within a 
predetermined region. 

18. The device of claim 17 wherein said apparatus 
provides access to said funds if said location 
corresponds to a predetermined location. 

19. The device of claim 16, further comprising 
apparatus for encrypting and digitally signing, or 
digitally signing said communication. 
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20. An arrangement for securely dispensing funds 
comprising: 

a device for the secure storage of funds, including: 

a memory for storing value of said funds, 

apparatus associated with said device for 
determining a location of said device; 

a communication port for providing 

communication between said device and a system, 
said device communicating said location to said 
system via said port; 

the system having a database for storing, for each 
device, a predetermined location; and 

apparatus in said system for providing an 
authorization to said device to dispense funds only 
if said present location is within a region 
associated with said predetermined location. 

21. The arrangement of claim 20 wherein said 
apparatus provides said authorization only if said 
present location matches said previously stored location. 

22. The arrangement . of claim 19 wherein 
cryptographic key management supports secure "* 
communication with the device. 

23. A device for the secure storage of funds 
comprising: 

a memory for storing value of said funds; 

a communication port for providing communication 
with a with a host for said device; 
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apparatus for preventing operation of said device or 
said host if said device does not receive a 
predetermined digital coded sequence from said host 
or said host does not receive a predetermined 
digital coded sequence from said device , 
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